six6r Privacy Policy

six6r is an online sports betting and casino platform operating at six6r.io, serving players primarily across Bangladesh. References to "six6r", "we", "us", or "our" in this Privacy Policy refer to the entity responsible for operating the six6r platform and acting as data controller in respect of personal data collected through it.

As data controller, six6r determines the purposes and means by which personal data submitted through the platform is collected and processed. Where we engage third-party service providers who process data on our behalf, those providers act as data processors and are contractually bound to process data only in accordance with our documented instructions.

For all privacy-related enquiries, data access requests, or concerns, please contact our data team at [email protected] with the subject line "Privacy Enquiry". We aim to respond to all privacy correspondence within five business days (Bangladesh Standard Time, UTC+6).

The categories of personal data we collect depend on how you interact with the six6r platform. The following table summarises the key data categories and the contexts in which they are collected:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where a player voluntarily discloses health-related information in the context of a responsible gaming request (for example, a request for self-exclusion citing a gambling-related health concern). Such information is treated with heightened confidentiality and used solely for the purpose of fulfilling the responsible gaming request.

six6r collects personal data through the following channels:

• Direct submission: Data you provide when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to a platform survey or promotion.
• Automated technical collection: Data collected automatically as you browse and interact with the platform, including IP addresses, device identifiers, browser fingerprints, session logs, and cookie data. This collection occurs whether or not you are logged into an account.
• Payment processing partners: Confirmation and reference data returned to us by MFS providers (bKash, Nagad, Rocket, Upay) when a deposit or withdrawal transaction is processed. We do not receive your full MFS account credentials — only transaction reference numbers and status confirmations.
• Identity verification providers: Where we engage a third-party KYC service to verify your identity documents, that provider may return a verification result and summary data to six6r. The original document images are handled in accordance with the provider's own privacy policy.
• Game studio providers: Round result data and session data from games delivered by third-party studios (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) may be shared with six6r in aggregated or individual form for audit, dispute resolution, and responsible gaming monitoring purposes.

six6r uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and administering your six6r player account, including processing login authentication and managing account preferences.
• Identity and age verification: Confirming that you meet the 21+ age requirement and that the identity information you have provided is accurate and not duplicated across multiple accounts.
• Payment processing: Executing deposit and withdrawal transactions through MFS providers and maintaining accurate records of all financial activity associated with your account.
• Service delivery: Providing access to sports betting markets, casino games, live dealer tables, and all other features available on the six6r platform.
• Customer support: Responding to enquiries, resolving disputes, processing complaints, and providing account assistance via live chat and email.
• Responsible gaming: Monitoring wagering patterns for signs of problem gambling behaviour, applying account-level limits at your request, and responding to self-exclusion requests.
• Fraud prevention and security: Detecting and investigating suspicious account activity, preventing multi-accounting, identifying attempted platform abuse, and protecting the financial integrity of the platform.
• Legal and regulatory compliance: Meeting record-keeping obligations, responding to lawful requests from competent authorities, and fulfilling anti-money laundering (AML) and know-your-customer (KYC) obligations.
• Platform improvement: Analysing usage patterns and technical performance data in aggregate to identify areas for improvement in platform design, game offering, and customer experience.
• Promotional communications: Sending you information about bonuses, promotions, and platform updates where you have provided consent to receive such communications. You may withdraw this consent at any time by contacting [email protected].

six6r relies on the following legal bases for processing personal data, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between six6r and the account holder — including account management, payment processing, game delivery, and customer support — is carried out on this basis.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including AML checks, KYC verification, and the retention of financial records, is carried out on this basis.
• Legitimate interests: Processing carried out for fraud prevention, platform security, technical performance monitoring, and responsible gaming oversight where such processing does not override your fundamental rights and freedoms.
• Consent: Processing carried out solely for the purpose of sending promotional and marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

six6r does not sell your personal data. We share data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processing partners: MFS providers including bKash, Nagad, Rocket, and Upay receive transaction reference data necessary to execute deposit and withdrawal instructions on your behalf.
• Identity verification providers: Third-party KYC service providers may receive your identity document data to complete the verification process. These providers are contractually bound to confidentiality obligations and are not permitted to use your data for their own purposes.
• Game studio providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, NetEnt, and other studios whose games are hosted on the six6r platform may receive session and round-result data to facilitate game delivery, technical support, and audit processes.
• IT and platform service providers: Hosting, cloud infrastructure, and cybersecurity service providers who maintain the technical environment in which the six6r platform operates may have access to data as a necessary function of their service.
• Legal and regulatory authorities: Where required by law, court order, or direction from a competent regulatory authority, six6r will disclose personal data to the requesting body. We will, where legally permitted, notify the affected account holder of any such disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of the six6r business or its assets, personal data held by six6r may be transferred to the acquiring entity as part of the transaction. Affected players will be notified in advance of any such transfer taking effect.

The six6r platform is accessed by players located in Bangladesh, and our primary data processing activities are designed with the Bangladesh market in mind. However, certain service providers engaged by six6r — including game studio providers, cloud infrastructure vendors, and identity verification services — may be located in, or process data from servers situated in, jurisdictions outside Bangladesh.

Where personal data is transferred to a third country, six6r ensures that appropriate safeguards are in place before any such transfer occurs. These safeguards may include contractual clauses that impose data protection obligations on the receiving party equivalent to those applied within jurisdictions that have adopted comprehensive data protection frameworks.

If you have questions about the specific safeguards applied to any international data transfer involving your personal data, you may submit a written enquiry to [email protected] with the subject line "Data Transfer Enquiry".

six6r retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by law. The following retention principles apply:

• Active account data: Identity data, contact data, and account preference data are retained for the duration of your active account relationship with six6r.
• Financial and wagering records: Transaction records and wagering history are retained for a minimum of seven years from the date of the transaction, in accordance with standard financial record-keeping requirements applicable to gaming and payment operations.
• KYC and verification documents: Identity documents submitted for verification purposes are retained for a period of five years from the date of the most recent account activity, or for the period required under applicable AML regulations, whichever is longer.
• Support communications: Live chat transcripts and email support records are retained for a period of two years from the date of the interaction, to support dispute resolution and quality assurance processes.
• Technical and usage data: Server logs and session data are retained for a period of 12 months, after which they are either deleted or anonymised for aggregate analytics purposes.
• Closed accounts: Following account closure, data subject to the above minimum retention requirements is retained for the applicable period and then securely deleted. Data not subject to a mandatory retention period is deleted within 90 days of account closure.

six6r uses cookies and similar tracking technologies to support platform functionality, maintain session state, analyse usage patterns, and deliver a consistent experience across visits. The following categories of cookies are used on the platform:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, preserve account preferences across page navigation, and support secure form interactions. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional cookies: These cookies remember choices you make on the platform — such as your preferred language setting or display preferences — so that you do not need to re-enter them on each visit.
• Analytics cookies: These cookies collect aggregated, anonymised data about how visitors interact with the platform — including which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is used internally to improve platform design and performance. No individual player is identified through analytics data.
• Security cookies: These cookies support fraud detection and platform security functions, including identifying unusual login patterns and flagging potential account compromise attempts.

Most web browsers allow you to control cookie settings through the browser's settings menu. You may choose to disable non-essential cookies; however, doing so may affect the functionality and performance of certain platform features. Strictly necessary cookies will remain active regardless of browser cookie settings, as they are required for the platform to operate.

six6r does not use third-party advertising cookies or permit advertising networks to place tracking technologies on the platform for the purpose of building advertising profiles.

As a data subject whose personal data is processed by six6r, you have the following rights in relation to your personal information. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request":

six6r implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the six6r platform
• Encryption at rest for databases containing personal and financial data
• Role-based access controls ensuring that internal personnel can only access personal data that is relevant to their specific job function
• Multi-factor authentication requirements for all administrative access to systems containing personal data
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Comprehensive audit logging of all access to and modification of personal data held in core systems
• Staff data protection training requirements applicable to all personnel with access to personal data
• Incident response procedures ensuring that security breaches are identified, contained, and reported in accordance with applicable notification obligations

While six6r takes all reasonable precautions to protect personal data, no security system is entirely impenetrable. Players are reminded that they also have a responsibility to protect their own account security by using a strong, unique password and by enabling any available two-factor authentication options offered by the platform.

The six6r platform is strictly for use by individuals aged 21 years and over. We do not knowingly collect personal data from anyone under the age of 21. Account registration requires confirmation of date of birth, and six6r performs age verification checks to enforce this restriction.

If six6r becomes aware that personal data has been collected from a person under the age of 21 — whether through misrepresentation during registration or by any other means — the associated account will be suspended immediately, any balance will be held pending investigation, and the personal data will be deleted from our systems as soon as the investigation is concluded and any applicable record-keeping obligations are satisfied.

Parents and guardians who have reason to believe that a minor in their care has registered an account with six6r should contact [email protected] immediately. We will prioritise such enquiries and take appropriate action without delay.

six6r may update this Privacy Policy from time to time to reflect changes in our data processing practices, updates to applicable law, or improvements in our platform operations. The effective date at the top of this document reflects when the current version came into force.

Where changes are material — meaning they substantially affect how we use your personal data or alter your rights in a significant way — we will notify registered account holders by email at least 14 days before the updated policy takes effect. We will also display a prominent notice on the platform directing users to review the updated policy.

Minor updates, such as corrections to typographical errors, clarifications that do not alter the substantive meaning of a section, or updates to the list of data processors reflecting routine vendor changes, may be published without prior notice. The updated version will be available on this page immediately upon publication.

Continued use of the six6r platform after an updated Privacy Policy takes effect constitutes acceptance of the updated version. If you do not accept the updated policy, you should discontinue use of the platform and request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data six6r holds about you, please contact our data team using the details below. All privacy correspondence is handled in English and is acknowledged within five business days.

For urgent security concerns — such as suspected unauthorised access to your account or a potential data breach — please use the subject line "Security Urgent" and our team will prioritise your enquiry.